CVE-2021-47795
GeoVision Geowebserver 5.3.3 - Local FIle Inclusion
- State
- Published
- Severity
- 8.7 High
- Published
- Jan 15, 2026
- Updated
- Apr 7, 2026
- Reserved
- Jan 14, 2026
Description
GeoVision GeoWebServer 5.3.3 contains multiple vulnerabilities including local file inclusion, cross-site scripting, and remote code execution through improper input sanitization. Attackers can exploit the WebStrings.srf endpoint by manipulating path traversal and injection parameters to access system files and execute malicious scripts.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.7 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N | VulnCheck |
| 3.1 | 6.2 Medium | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | VulnCheck |
Weaknesses
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected Products
| Product | Versions |
|---|---|
GeoVision GeowebserverGeovision |
|
References
- ExploitDB-50211exploit
- GeoVision Cyber Security Pageproduct
- VulnCheck Advisory: GeoVision Geowebserver 5.3.3 - Local FIle Inclusionthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.